The Newsletter Popup WordPress plugin through 1.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks as the wp_newsletter_show_localrecord page is not protected with a nonce.
References
Configurations
History
21 Nov 2024, 07:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://wpscan.com/vulnerability/90a1976c-0348-41ea-90b4-f7a5d9306c88 - Exploit |
07 Nov 2023, 04:01
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
05 Jun 2023, 14:45
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Newsletter Popup Project newsletter Popup
Newsletter Popup Project |
|
| CPE | cpe:2.3:a:newsletter_popup_project:newsletter_popup:*:*:*:*:*:wordpress:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| References | (MISC) https://wpscan.com/vulnerability/90a1976c-0348-41ea-90b4-f7a5d9306c88 - Exploit |
30 May 2023, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-30 08:15
Updated : 2025-01-10 21:15
NVD link : CVE-2023-0766
Mitre link : CVE-2023-0766
CVE.ORG link : CVE-2023-0766
JSON object : View
Products Affected
newsletter_popup_project
- newsletter_popup
CWE
No CWE.